Audit- No userID for modify security task(?)

BPC 5.1 SP3
We have auditing on, and it seems to be working. However, any time an admin modifies a user's profile, the audit report shows the activity but there's no UserID or MachineID for the record. I checked the audit table AuditActivityHdr... and there's no data stored in those fields for any "Modify User" task.
Is this by design? How would we know who modified a user's profile?

If you enabled the audit to register all the activities regarding administration module then normally it should be registered. If it doesn't register this admin activity means it is a bug and you have to report this one.
Regards
Sorin Radulescu

Similar Messages

Reporting & Audit Compliance Solutions for Cisco Secure ACS

The Cisco Secure ACS Access Control Server is probably the worlds best selling remote access security solutions and its quite likely that you're already using it! Wouldn't it be great to know exactly what it was doing? Further still, when you have to provide audit documentation regarding your policies and how effective they are, how long does this take and what valuable data remains locked inside the ACS database and logs?
extraxi offer a range of products that deliver a complete solution for harvesting, managing and analyzing your ACS/SBR log data to meet the increasing demands for regulatory compliance (SOX, COBIT) and overall enterprise monitoring and security.
We are proud to supply customers including Intel, Ford, Lego, T-Mobile, US Dept of State, US Army, British Telecom, First Energy, TNT Express, Kodak and JP Morgan and many more so why not take a look at our industry leading solutions and evaluate the benefits for your organization...
Featured Products:
* aaa-reports! enterprise edition - Automated Reporting
The best reporting system for Cisco Secure ACS and Funk SBR just got a whole lot better! Improved reports, enhanced filtering and query builder and now with up to 48GB internal storage based on SQL Server technology makes this the ideal solution for large or complex AAA deployments and those that need the additional functionality from the standard aaa-reports! tool.
With aaa-reports! enterprise you have a complete application for reporting including many canned reports (each with flexible filtering options) and a point-n-click query builder for designing custom reports.
For historic trending, forensics and audit compliance there simply is no better reporting application for Cisco Secure ACS or Funk/Juniper SBR.
* csvsync - Automated ACS Database & Log File Collection
csvsync allows you to download CSV log data (RADIUS, TACACS+, Passed/Failed Attempts etc) directly from any number of Cisco Secure ACS servers (Windows & Appliance) via http(s). Version 3.0 now supports the collection of ACS database itself for import into aaa-reports and detailed reporting based on the ACS security policies. Simple, secure and efficient, csvsync is the best solution for harvesting log data from your Cisco Secure ACS servers.
Download fully working 60 day trial versions at http://www.extraxi.com/rq.asp?utm_source=technet&utm_medium=forum
Fore more information please visit http://www.extraxi.com/?utm_source=technet&utm_medium=forum

bump

Modifying Identity for oracle.security.idm.RoleProfile

Hello. In the documentation: http://docs.oracle.com/cd/E12839_01/core.1111/e10043/devuserole.htm#autoId36 it is written that we can modify the Property by using oracle.security.idm.ModProperty: http://docs.oracle.com/cd/E24001_01/apirefs.1111/e14658/oracle/security/idm/ModProperty.html class. From the example shown there we can modify property for oracle.security.idm.UserProfile: http://docs.oracle.com/cd/E16340_01/apirefs.1111/e14658/oracle/security/idm/UserProfile.html. But I am unable to setProperty for oracle.security.idm.RoleProfile: http://docs.oracle.com/cd/E15523_01/apirefs.1111/e14658/oracle/security/idm/RoleProfile.html class, since there is no such method defined.
How can I modify property for role. Can anyone show me an example or point to me into right direction?
Thanks in advance.
Regards.
Tapas.

I may be found a solution. The interface oracle.security.idm.RoleProfile extends oracle.security.idm.Role and the oracle.security.idm.spi.AbstractRoleProfile implements oracle.security.idm.RoleProfile, in turns oracle.security.idm.spi.AbstractRoleProfile is an abstract class and this class is extended by following three classes:
1. oracle.security.idm.providers.stdldap.LDRole,
2. oracle.security.idm.providers.libovd.LibOVDRole and
3. oracle.security.idm.util.RoleProfileValueObject
All of them has setProperty(ModProperty modProp) method defined within themselves. Among them the oracle.security.idm.util.RoleProfileValueObject class throws oracle.security.idm.OperationNotSupportedException from setProperty(ModProperty modProp) method and it does not do anything.
In my application I need to find which one is the concrete implementation of oracle.security.idm.RoleProfile, so that I can proceed further. Before Monday I will not be able to do that. I guess it will work.
I need to break the source code. Don't know whether or not is is illegal. But I didn't have any other options. The documentation lacks in many places. Even the javadoc of the interface oracle.security.idm.RoleProfile does not mention the name of implemented classes of it.

BPC 10 Microsoft Security - Task Profile

My client wishes to assign the ability of Dimension member maintenance to only the System Admins. I have moved the Dimension Member Maintenance out of the available tasks for the other group. However, the other group may still add and delete Dimension members. For example, Account member.
Has anyone experienced this problem?
Thank you

Hi Sean,
by default dimension mantaince is assigned only to SystemAdmin, if you have other groups that can modify dimensions simply eliminate "Manage Dimensions" and "Manage Models" from their security task profiles.
Regards
Roberto

Create a Secure Client for a Secure Web Service- is failing

Hi,
This is actually with reference to the webservice tutorial.I am trying the example on Create a Secure Client for a Secure Web Service and have followed all the steps mentioned,however I am getting the following error:
D:\JDev11gTp\jdk\bin\javaw.exe -client -classpath D:\Jdev11gTpInstance\mywork\WebServiceApplications\.adf;D:\Jdev11gTpInstance\mywork\WebServiceApplications\WebServiceProjects\classes;D:\JDev11gTp\webservices\lib\jaxws-api.jar;D:\JDev11gTp\webservices\lib\jws-api.jar;D:\JDev11gTp\webservices\lib\orawsmetadata.jar;D:\JDev11gTp\webservices\lib\wsclient.jar;D:\JDev11gTp\j2ee\home\lib\activation.jar;D:\JDev11gTp\j2ee\home\lib\ejb.jar;D:\JDev11gTp\j2ee\home\lib\jms.jar;D:\JDev11gTp\j2ee\home\lib\jta.jar;D:\JDev11gTp\j2ee\home\lib\mail.jar;D:\JDev11gTp\j2ee\home\lib\servlet.jar;D:\JDev11gTp\webservices\lib\jaxrpc-api.jar;D:\JDev11gTp\webservices\lib\wsserver.jar;D:\JDev11gTp\webservices\lib\wssecurity.jar;D:\JDev11gTp\webservices\lib\wsdl.jar;D:\JDev11gTp\webservices\lib\orasaaj.jar;D:\JDev11gTp\webservices\lib\saaj-api.jar;D:\JDev11gTp\webservices\lib\orawsdl.jar;D:\JDev11gTp\webservices\lib\orawsrm.jar;D:\JDev11gTp\webservices\lib\orawsrel.jar;D:\JDev11gTp\webservices\lib\jaxr-api.jar;D:\JDev11gTp\webservices\lib\orajaxr.jar;D:\JDev11gTp\webservices\lib\relaxngDatatype.jar;D:\JDev11gTp\webservices\lib\xsdlib.jar;D:\JDev11gTp\webservices\lib\mdds.jar;D:\JDev11gTp\webservices\lib\wsif.jar;D:\JDev11gTp\webservices\lib\fabric-common.jar;D:\JDev11gTp\webservices\lib\fabric-interceptors.jar;D:\JDev11gTp\jlib\jaxen.jar;D:\JDev11gTp\jlib\oraclepki.jar;D:\JDev11gTp\jlib\ojpse.jar;D:\JDev11gTp\jlib\jsr106.jar;D:\JDev11gTp\jlib\jsr105.jar;D:\JDev11gTp\jlib\osdt_xmlsec_jce.jar;D:\JDev11gTp\jlib\osdt_wss_jce.jar;D:\JDev11gTp\jlib\osdt_saml_jce.jar;D:\JDev11gTp\jlib\osdt_saml2_jce.jar;D:\JDev11gTp\jlib\osdt_core.jar;D:\JDev11gTp\jlib\osdt_cert.jar;D:\JDev11gTp\jlib\osdt_xmlsec.jar;D:\JDev11gTp\jlib\osdt_wss.jar;D:\JDev11gTp\jlib\osdt_saml.jar;D:\JDev11gTp\jlib\osdt_saml2.jar;D:\JDev11gTp\jlib\ojmisc.jar;D:\JDev11gTp\j2ee\home\lib\http_client.jar;D:\JDev11gTp\j2ee\home\jazncore.jar;D:\JDev11gTp\j2ee\home\oc4jclient.jar;D:\JDev11gTp\rdbms\jlib\xdb.jar;D:\JDev11gTp\j2ee\home\lib\javax77.jar;D:\JDev11gTp\lib\java\api\jsr173_api.jar;D:\JDev11gTp\lib\java\shared\sun.jaxb\2.0\jaxb-impl.jar;D:\JDev11gTp\lib\java\shared\sun.jaxb\2.0\jaxb-xjc.jar;D:\JDev11gTp\lib\java\shared\sun.jaxb\2.0\jaxb1-impl.jar;D:\JDev11gTp\j2ee\home\lib\oc4j-schemas.jar;D:\JDev11gTp\jlib\ojdl.jar;D:\JDev11gTp\jlib\ojdl2.jar;D:\JDev11gTp\jlib\fmw_audit.jar;D:\JDev11gTp\j2ee\home\lib\jmxri.jar;D:\JDev11gTp\j2ee\home\lib\jmx_remote_api.jar;D:\JDev11gTp\j2ee\home\lib\adminclient.jar;D:\JDev11gTp\j2ee\home\lib\jmxframework.jar;D:\JDev11gTp\j2ee\home\lib\jmxspi.jar;D:\JDev11gTp\j2ee\home\lib\xmlcfg.jar;D:\JDev11gTp\jlib\dms.jar;D:\JDev11gTp\jlib\orai18n.jar;D:\JDev11gTp\j2ee\home\lib\commons-digester.jar;D:\JDev11gTp\j2ee\home\lib\spring.jar;D:\JDev11gTp\lib\java\shared\oracle.wsm\11.1.1.0\wsm-policy-core.jar;D:\JDev11gTp\lib\java\shared\oracle.wsm\11.1.1.0\wsm-pmclient.jar;D:\JDev11gTp\lib\java\shared\oracle.wsm\11.1.1.0\wsm-pap.jar;D:\JDev11gTp\lib\java\shared\oracle.wsm\11.1.1.0\wsm-agent.jar;D:\JDev11gTp\lib\java\shared\oracle.wsm\11.1.1.0\wsm-secpol.jar;D:\JDev11gTp\lib\java\shared\oracle.javatools\11.1.1.0.0\javamodel-rt.jar;D:\JDev11gTp\lib\java\shared\oracle.javatools\11.1.1.0.0\javatools-nodeps.jar;D:\JDev11gTp\lib\java\shared\oracle.toplink\11.1.1.0.0\toplink-sdo.jar;D:\JDev11gTp\lib\java\api\jaxb-api.jar;D:\JDev11gTp\lib\xmlparserv2.jar;D:\JDev11gTp\lib\xml.jar;D:\JDev11gTp\jakarta-taglibs\commons-logging-1.0.3\commons-logging.jar -Dhttp.proxyHost=localhost -Dhttp.proxyPort=8099 -Dhttp.nonProxyHosts= -Dhttps.proxyHost=localhost -Dhttps.proxyPort=8099 -Dhttps.nonProxyHosts= HelloPolicyPortClient
Feb 1, 2008 5:13:43 PM oracle.j2ee.ws.common.context.ContextInterceptor init
INFO: Context provider properties file not found
Feb 1, 2008 5:13:44 PM oracle.wsm.audit.Auditor <init>
INFO: Created J2SE auditor for componentType=OWSM-AGENT busstop=D:\oracle\product\10.2.0\client_1\auditlogs\OWSM-AGENT filter=false auditor=oracle.security.audit.Auditor@143a083
Feb 1, 2008 5:13:44 PM oracle.wsm.audit.Auditor <init>
INFO: Created J2SE auditor for componentType=OWSM-PM-LIB busstop=D:\oracle\product\10.2.0\client_1\auditlogs\OWSM-PM-LIB filter=false auditor=oracle.security.audit.Auditor@15af049
SEVERE: WSM-04514 An MDS error occurred.
SEVERE: WSM-09012 No key, WSM-06002, was found in the resource bundle oracle.wsm.resources.policyvalidation.PolicyValidationMessageBundle.
javax.xml.ws.WebServiceException: oracle.fabric.common.PolicyEnforcementException: PolicySet Invalid: WSM-06002 PolicyReference Invalid policy reference
at oracle.j2ee.ws.client.jaxws.DispatchImpl.invoke(DispatchImpl.java:466)
at oracle.j2ee.ws.client.jaxws.WsClientProxyInvocationHandler.invoke(WsClientProxyInvocationHandler.java:204)
at $Proxy28.sayHello(Unknown Source)
at HelloPolicyPortClient.main(HelloPolicyPortClient.java:35)
Caused by: oracle.fabric.common.PolicyEnforcementException: PolicySet Invalid: WSM-06002 PolicyReference Invalid policy reference
at oracle.integration.platform.common.InterceptorChainImpl.createPolicyEnforcementException(InterceptorChainImpl.java:217)
at oracle.integration.platform.common.InterceptorChainImpl.processRequest(InterceptorChainImpl.java:104)
at oracle.j2ee.ws.client.mgmt.runtime.SuperClientInterceptorPipeline.handleRequest(SuperClientInterceptorPipeline.java:91)
at oracle.j2ee.ws.client.jaxws.DispatchImpl.handleRequest(DispatchImpl.java:309)
at oracle.j2ee.ws.client.jaxws.DispatchImpl.handleRequest(DispatchImpl.java:290)
at oracle.j2ee.ws.client.jaxws.DispatchImpl.invoke(DispatchImpl.java:444)
... 3 more
Process exited with exit code 0.
Can anyone please give any clue as to why this error is coming?
Thanks.

Hi
Please refer to this thread
Re: Can I create a login/password protection in Muse for a HTML5 page or two?

Hiding Button in UWL for specific workflow task items

Hi -
In UWL, is there a way to control the visibility of standard buttons like "forward", "replace", or "create Adoc Request" based on the task type.
Example, i would not want to provide the "forward" button option for a specific tasks like expense tasks.
We are on EP 6 and ECC 5.0
Helpful answers will be rewarded with points.
Thanks
PR

I don't think excluding the actions on the uwl iview property will fully solve this problem as, from what I understand, the actions should only be removed for certain tasks. The way to achieve this is to create different views for the tasks. This can be done in the uwl xml config file. You can assign tasks to be displayed by specific views, and within the definition of these views you can remove/add actions as well as modify the look and feel (to a certain extent). However, this will only affect the buttons/actions you see on the view section of the task - not the uwl list itself as the actions on the list are generic.
Check the following document which describes how to configure the uwl - check the section on views:
[How to configure the uwl.pdf|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a3461636-0301-0010-3787-978f5ac8bd45]
Cheers,
Dion

Security - Task Profiles - Task Description --- Where to be found?

Hello there,
I have been searching my fingers tips bloody! ... Many BPC 5.1 and 7.0 documentation, dont bother mentioning ANY Description for the any tasks under the task interfaces.
May somebody please post (copy / paste) DESCRIPTION, what exactly each TASK means and / or gives access to?! --- Security would like to know for certain!
It's much appreciated.,
Maximilian
Edited by: Maximilian Weisheit on May 12, 2009 12:15 AM

Hi peter,
thank you for your note. - I went back into the SAP Library File that came with the BPC 7.0 NetWeaver version. And surprisingly, there was no TASK PROFILE DESCRIPTION Table to be found. I went through every search result coming from the "TASK" search. No such table.
Do you mind taking a moment to Copy / Paste the table you referring to in the forum post here. Alternatively you may contact me through the profile contact.
Eitherway, It is highly apreciated, as I am not able to access a MS BPC Help File from here.
Kind Regards,
Maximilian

Differences between security tasks in BPC 7.0 MS and BPC 10.0 NW

Hi all,
I am on a migration Project from BPC 7.0 MS to BPC 10.0 NW and I have to migrate task profiles.
The problem is that while uploading the task profiles from a .csv, I realized that there are differences between the tasks to assign in source and destination system. Sometimes the task that exist in MS doesn't exist in NW or there are new tasks in NW that doesn't exist in MS version.
I am attaching an Excel sheet with the comparison between both systems.
The question is simple, how can I move these task profiles on a semiautomatic way? Do you know about any documentation about the differences between security task in MS and NW?
Thanks in advance

we can use flat file upload and custom data manager package for loading data from BI to BPC

[svn:bz-trunk] 21014: bug fix for RTMP security test case failure for Tomcat 7,

Revision: 21014
Revision: 21014
Author:   [email protected]
Date:     2011-04-04 13:44:59 -0700 (Mon, 04 Apr 2011)
Log Message:
bug fix for RTMP security test case failure for Tomcat 7,
defer the ValveBase.getContainer() call to run time.
Checkin tests not run as it only applies to Tomcat 7
Modified Paths:
    blazeds/trunk/modules/opt/src/tomcat/flex/messaging/security/Tomcat7Valve.java

Revision: 21014
Revision: 21014
Author:   [email protected]
Date:     2011-04-04 13:44:59 -0700 (Mon, 04 Apr 2011)
Log Message:
bug fix for RTMP security test case failure for Tomcat 7,
defer the ValveBase.getContainer() call to run time.
Checkin tests not run as it only applies to Tomcat 7
Modified Paths:
    blazeds/trunk/modules/opt/src/tomcat/flex/messaging/security/Tomcat7Valve.java

How can we modify the Task Priority in BPM workspace???

How can we modify the Task Priority in BPM workspace??? Is it possible?? If so what is the best and easy way to implement this??

Hi Chandra,
First please find the job name in SM37 for FIGL and check the job status to be in "released" status. Select that job and go to job menu and click on change. then it will take you to the job screen where you have "job class". Here you can change the job class to "A" to get to high priority.
If you are unable to edit the job then create a new job with the same variants by clicking STEP button in the Job screen.
Try these steps, let me know if are able to do so.
Regards,
Ravi Kanth

Users as other task owners are receiving 5 emails notification for the same task

users as other task owners are receiving 5 emails notification for the same task in Sharepoint 2010. I have tried to add a 5 minutes delay on the other task owners workflow with no luck.any suggestions? Thanks

The Book confuses me. I still think assignment delay and leveling resources are the same. Here is the explanation from the book for the three concepts.
" Project offers two types of delays:
Leveling delay. This type of delay applies to tasks; it pushes out the start date for the task and all its resource assignments. It’s meant specifically for remov-ing resource overallocations. With the Leveling Delay field, you can remove
all leveling delays by choosing Resource➝Level➝Clear Leveling.
Assignment delay. This type of delay applies to a single assignment within a task. Suppose you have a security consultant coming in to help lock down your site. However, your employees have prep work to do before the consultant can get started.
You can assign everyone to the same “Try hacking into office” task but delay the consultant’s assignment by 5 days. "
After a couple of pages;
" Leveling Resources
In Project 2010, you can level the entire project, tasks you select, or a single resource. By leveling several tasks that are all vying for the resource, or alternatively, leveling only the most in-demand resources, you can focus on the problematic
portions of your project. Project automatically chooses popular settings in the Resource Level-ing dialog box. In most situations, you might as well run Resource Leveling with these settings. You can undo the leveling if you don’t like the results, but you
can get some clues from the initial results to help you determine the settings you need. Here’s how to level different parts of your project using the leveling settings cur-rently in place:
Level a resource. Select the resource you want to level, and then choose Resource➝Level➝Level Resource"

I tried to buy an app and itunes keeps asking for a security code. What is a security code? I do not have one. I have a password.

I tried to buy an app and itunes keeps asking for a security code. What is a security code? I only have a password! And ID

Are you using a credit card?
http://store.apple.com/au/help/payments#creditus
Security codes
The credit card security code is a unique three or four digit number printed on the front (American Express) or back (Visa/MasterCard) of your card.

HT201363 I have a lot of money on my Apple ID but when I try to buy something it ask for my security questions that I do not remember the answers to. I also don't have access to the email I used to set up my Apple ID but I do know the password how do I fi

I have a lot of money on my Apple ID but when I try to buy something it ask for my security questions that I do not remember the answers to. I also don't have access to the email I used to set up my Apple ID but I do know the password how do I fix this ?

You need to ask Apple to reset your security questions; ways of contacting them include phoning AppleCare and asking for the Account Security team, clicking here and picking a method for your country, and filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(105412)

How to create a custom task in SRM for the standard task

Hi Gurus,
How to create a custom task in SRM for the standard task eg: TS10407929
regards,
George.

from PFTC itself. Same.

When I try to open an .ai/pdf file received through my email, it won't open and asks for a password. I have never set up any kind of password for email security, but have tried typing in my standard passwords. Nothing works. I wonder if it has anything to

When I try to open an .ai/pdf file received through my email, it won't open and asks for a password. I have never set up any kind of password for email security, but have tried typing in my standard passwords. Nothing works. I wonder if it has anything to do with the use of my Wacom3 Tablet...I've been having trouble with it and was getting the same message when trying to open the User's Manual in my Applications/WacomTablet file on my hard drive. Any suggestions? I just downloaded the latest version for the Wacom and recently upgraded to Snow Leopard 10.6.7 (which I hate, and my CS3 hates, etc.)

It sounds like you have a a password-protected PDF. The password was set by the person who encoded it.

Audit- No userID for modify security task(?)

Similar Messages

Maybe you are looking for